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Sir: 

Pursuant to 37 C.F.R. §§ 1.97 and 1.98, Applicants hereby submit an Information 
Disclosure Statement ("IDS") for consideration by the Examiner. The patents, publications or 
other information submitted for consideration by the Patent Office are listed on Form PTO-1449, 
attached hereto. Submitted herewith is a legible copy of (i) each foreign patent; (ii) each 
publication or that portion which caused it to be listed; and (iii) all other information or that 
portion which caused it to be listed. 

Except as may be indicated below, all of the patents, publications or other information are 
in the English language, a copy of which is attached hereto and therefore, a concise explanation 
of each reference is ,not required. The following additional information is provided for the 
Examiner's consideration. 



I hereby certify that this correspondence is being deposited with the United States Postal Service as first 
class mail in an envelope addressed to: Mail Stop Amendment, Commissioner for Patents, P.O. Box 
1450, Alexandria, VA 22313-1450, on September 23, 2005. 
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To assist the Examiner in reviewing this IDS, the Applicants have conducted a key word 
search of each U.S. patent and U.S. patent application publication listed on the attached Form 
PTO-1449. The Applicants used the following search terms in his query of the U.S. patents and 
U.S. patent application publications: (1) "computer$"; (2) "intrusion$", (3) "detect$", (4) 
"(classif$ or type or types)", (5) "filter$", (6) "display$", and (7) "(select$ or chang$)." The 
Applicants used Boolean logic when performing this search in which each term was linked by the 
logical connector "AND." A search of these U.S. patents and U.S. patent application 
publications using the aforementioned terms and Boolean search logic yielded the following 
results (20 patents and 5 publications): 



U.S. PATENTS 

U.S. Patent No. 5,440,723 to Arnold et al. 

U.S. Patent No. 5,905,859 to Holloway et al. 

U.S. Patent No. 6,088,804 to Hill et al. 

U.S. Patent No. 6,185,689 to Todd Sr. et al. 

U.S. Patent No. 6,321,338 to Porras et al. 

U.S. Patent No. 6,324,647 to Bowman-Amuah 

U.S. Patent No. 6,347,374 to Drake et al. 

U.S. Patent No. 6,353,385 to Molini et al. 

U.S. Patent No. 6,405,364 to Bowman-Amuah 

U.S. Patent No. 6,453,345 to Trcka et al. 

U.S. Patent No. 6,460,141 to Olden 

U.S. Patent No. 6,484,203 to Porras et al. 

U.S. Patent No. 6,499,107 to Gleichauf et al. 

U.S. Patent No. 6,546,493 to Magdych et al. 

U.S. Patent No. 6,606,744 to Mikurak 

U.S. Patent No. 6,647,400 to Moran 

U.S. Patent No. 6,704,874 to Porras et al. 

U.S. Patent No. 6,708,212 to Porras et al. 

U.S. Patent No. 6,711,615 to Porras et al. 

U.S. Patent No. 6,816,973 to Gleichauf et al. 



U.S. Patent Application Publications 

U.S. Patent Application Publication No. to 2001/0034847 Gaul Jr. 

U.S. Patent Application Publication No. 2002/0144156 to Copeland m et al. 
U.S. Patent Application Publication No. 2003/0088791 to Porras et al. 
U.S. Patent Application Publication No. 2003/0212903 to Porras et al. 
U.S. Patent Application Publication No. 2004/0010718 to Porras et al. 

2 



Appl. No. 09/844,448 
Information Disclosure Statement 
Docket No. 05456.105005 

The Applicants submit that these search terms cannot be interpreted as providing 
emphasis on these terms when the claims are interpreted and construed by both the Examiner and 
the courts. The Applicants merely selected these terms to identify the prior art that may be more 
relevant than prior art that do not contain these search terms. 

To further assist the Examiner, the Applicants have organized each of the U.S. Patents 
and U.S. Patent Application Publications according to classification. For the non-U.S. patent 
prior art, the Applicants have annotated Form PTO-1449 with the location of each document in a 
respective box. 

The Applicants exerted this additional time and effort to help the Examiner so that if a 
patent is ever issued on this patent application, third parties will understand that the Applicants 
submitted the attached prior art on a good faith basis. The Applicants recognize that the attached 
prior art is voluminous but it is not the Applicants' intent to "bury" any patents that maybe more 
pertinent than other ones. The Applicants do not want to dismiss any reference that they are 
aware of as cumulative in order to prevent third parties from arguing that the Applicants 
intentionally did not submit any prior art in an effort to deceive the Examiner and the Patent 
Office. 

This IDS is being filed under 37 C.F.R. § 1.97(b)(4), before the mailing of a first Office 
Action after the filing of a request for continued examination 37 C.F.R. § 1.114. No certification 
is required. No fee is believed to be due. However, should the Commissioner determine 
otherwise, he is authorized to charge such fees to Deposit Account No. 11-0980. 



3 



Appl. No. 09/844,448 
Information Disclosure Statement 
Docket No. 05456.105005 



If the Examiner has any questions concerning this IDS, he is requested to contact the 
undersigned. If it is determined that this IDS has been filed under the wrong rule, the Patent 
Office is requested to consider this IDS under the proper rule (with a petition if necessary) and 
charge the appropriate fee to Deposit Account No. 11-0980. 



Enclosures: Respectfully submitted, 

1. Form PTO- 1449 

2. Foreign Patents KING & SPALDING LLP 

3. Publications L /7/ ^ 



4. Postcard 
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